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Abstract 



Let F/ E be a finite Galois extension of fields with abelian Galois group T. A 
self-dual normal basis for F/ E is a normal basis with the additional property that 
h^- ■ Trp/£;{g{x),h{x)) = 5g^h for g,h £ T. Bayer-Fluckiger and Lenstra have shown that 

^~i , when char{E) ^ 2, then F admits a self-dual normal basis if and only if [F : E] is 

"^ I odd. If F/E is an extension of finite fields and char{E) = 2, then F admits a self-dual 

2 ' normal basis if and only if the exponent of T is not divisible by 4. In this paper we 

construct self-dual normal basis generators for finite extensions of finite fields whenever 
they exist. 

Now let K he a, finite extension of Qp, let L/K be a finite abelian Galois extension 
>^ . of odd degree and let Ol be the valuation ring of L. We define A^/^ to be the unique 

^SJ ! fractional D^-ideal with square equal to the inverse different of L/K. It is known that 

a self-dual integral normal basis exists for Ai^ij^ if and only if L/K is weakly ramified. 
Assuming p 7^ 2, we construct such bases whenever they exist. 



1 Introduction 

Let F/E be a finite Galois extension of fields with abelian Galois group T . For x G -F we let 
TrpiE^x) = Trr(x) = ^^gr 7(^) ^^ ^^^ trace of x in E. We define Tp/E : F x F ^ E to he 
the symmetric non-degenerate i?-bilinear form associated to the trace map (i.e., Tp/e{x, y) = 
Trp/E^xy)) which is F-invariant in the sense that TL/K{j{x),j{y)) = TL/K{x,y) for all 7 in 
F. 

For a; G -F we say that a; is a normal basis generator for F over ii^ if x is a generator 
of F as a ii^[F]-module. If, in addition, Tp/K{x,'y{x)) = 61^^ for all 7 G F, we say that x is 
a self-dual normal basis generator for F over E. In [2j, Bayer-Fluckiger and Lenstra prove 
that when char{E) 7^ 2, then F admits a self-dual normal basis if and only if [F : E] is odd. 
If F/E is an extension of finite fields and char{E) = 2, then F admits a self-dual normal 
basis if and only if the exponent of F is not divisible by 4. We remark that if x G -F is a 
self-dual element, i.e., T^/i^ (x,7(x)) = 61^-y for all 7 G F, then x is necessarily a normal basis 
generator for F over E. 



In this paper we give explicit constructions for self-dual normal bases at a field level for 
extensions of finite fields Wqn/¥g. We also give explicit constructions at an integral level for 
abelian extensions of local fields L/K, giving generators of the unique Galois module A^/k 
whose square is equal to the inverse different. As these two subjects may be of interest to 
people with very different backgrounds we have tried to treat the two cases as separately as 
possible. However, some crossover is unavoidable. 

Aside from their intrinsic interest, self-dual normal bases for extensions of finite fields are 
of use in encryption and have been used by Wang for constructing the Massey-Omura finite- 
field multiplier (see [2Z])- There are results in the literature constructing such bases, see [9], 
[15] and [27] but all put some restrictions on the degree of the extension or the characteristic 
of the base field. We present here constructions for self-dual normal bases for any extension 
of finite fields for which they exist. The method we use for these constructions is to describe 
normal basis generators and then modify them slightly to give self-dual elements. We use 
results of Semaev, [19], to describe these normal bases, however there is a large amount of 
literature concerning normal basis generators for finite fields, see, [I3], [H], [23], [21] and 
[26]. 

We now assume i^ to be a finite extension of Qp and let L/K be a finite Galois extension. 
Let I^L/K be the different of the extension L/K. When 'Dl/k has an even valuation we define 
Al/k to be the unique fractional ideal such that 

and remark that Ai^jk = i^L when L/K is unramified. The Galois module, A^/k, is self-dual 
with respect to the trace form, i.e., 

^L/K = {aeL: TL/K{a, Al/k) ^ Ol} = Al/k- 

For [L : K] odd, 1)l/k always has an even valuation (see [21], IV Prop. 4) and Erez has 
proved, in [6], that an integral normal basis for A^/k exists if and only if L/K is at most 
weakly ramified. In other words, there exists a.n x E L such that x generates Al/k as an 
Di^ [G]- module if and only if the second ramification group of L/K is trivial. Inspired by 
the results of Erez and Bayer-Fluckiger and Lenstra, we ask two questions about self-dual 
integral normal bases for Al/k- Firstly, when do such bases exist? Secondly, when they do 
exist, can we describe them explicitly? 

The first question is now completely answered. With L/K as above, no such basis will 
exist if [L : K] is even ([2] Theorem 6.1a) and if [L : K] is odd then such a basis exists if 
and only if L/K is at most weakly ramified ([7], Corollary 4.8 and [S], Theorem 1). 

There are only two results on the explicit construction of self-dual normal bases of Al/k 
known to us. The first is due to Erez, with L/Qp and L contained in some cyclotomic 
extension of Qp, [5]. The second is due to the author and is a generalisation of Erez's 
results using Dwork's power series in extensions of local fields generated by Lubin-Tate 
formal groups, [16j. Specifically, the author studies cyclic degree p extensions, M/K, of 
local fields where K/Qp is unramified. Dwork's exponential power series can be used to 
explicitly describe generators of Kummer extensions, L/K{(p), with M G L. If x G L is 



such a Kuminer generator, then (1 + TrL/M{x))/p is a self-dual normal basis generator for 
^M/K- In comparison, the main method used in this paper is to construct a normal basis 
generator for A^/x, with L/K abelian, and then use Galois resolvends to modify it to give 
a self-dual normal basis generator. We remark that this method is not needed in the tamely 
ramified case as then L/K will be Kummer and such a basis can be described directly in 
terms of generators of L/K. 

We use these methods to give explicit constructions for self-dual integral normal bases for 
Al/k whenever L/K is abelian and p ^ 2. We remark that some of our constructions still 
work for p = 2 and the only case needed for completeness is L/K unramified with [L : K] = r* 
where r is an odd prime and i e M. We should also remark that the constructions in [5] and 
[16] are probably a lot more useful in terms of calculations of invariants such as resolvents 
and Galois Gauss sums. 

This paper is structured into three sections. In Section |2] we prove some key results that 
describe how to modify normal basis generators so that they generate self-dual normal bases. 
We give statements for both local and finite fields, but the methods of proof are very similar. 
In Section |3] we study extensions of finite fields of characteristic p. We reduce the problem 
to that of studying extensions with degree coprime to p and extensions with degree a pth 
power. We then give constructions for self-dual normal bases for finite extensions of finite 
fields whenever they exist. In SectionlHwe study abelian extensions of local fields L/K where 
K is an extension of Qp. We reduce the problem to the separate cases of totally ramified 
extensions and unramified extensions. We then construct self-dual integral normal bases for 
A-L/K', whenever they exist in the totally ramified case; with the assumption that p ^ 2 in 
the unramified case. 

2 Key Results 

Let p be an odd prime. Let K he a finite extension of Qp with valuation ring Ok and residue 
field k. Let q be some power oi p and let Fg be the finite field of q elements. Let G be a finite 
abelian group. We begin by proving a number of results which will be key to constructing 
self-dual normal basis generators for extensions of K or ¥q with Galois group isomorphic to 
G. Most of the results for finite fields follow immediately by considering the residue fields in 
the corresponding result for local fields. We state the results separately to make the theory 
for finite fields complete in its own right. 

Since G is a finite abelian group we can let G = Gp x H where Gp is the p-primary 
component of G and p/\H\. 

Lemma 2.1 Let Z{Ok[G]) (resp. Z{^q[G])) be the Jacobson radical ofOxlG] (resp. ¥q[G\) 
and k be the residue field of Ok, we then have the the following exact sequences. 

1 -> 1 + a(OK[G]) ^ Dk[G]^ ^ k[H]'' -^ 1 

1 ^ 1 + 5(FJG]) ^ FJG]^ ^ F,[iJ]>< ^ 1. 



Proof. Let vr be a uniforinising parameter for Ok- We define a homomorphism of groups 
6 : D/^-fG]^ — !■ k[H]^ as the map generated by sending g to 1 for all g & Gp then reducing 
modulo vr. 

We observe that 6 : Dk[H]'' -^ k[HY and that Ok[HY ^ (0;^[G'])^ and so 6 is 
surjective. 

From [11] Theorem 1, we know that the ideal -C5(Oi^[G]) will be generated by the set 
{vr, {g — IjgGGp}) therefore we clearly have (1 + ^{Ok[G])) C ker 9. 

Let ^ggc* 'I2hGH^afi9^ be an element of ker 6^, i.e., J2qeG J2heH^9h^ ~ l + ctvrTr for some 
a^r G Dfc[G]. We see that 

g€Gp h£H g<^Gp heH g&Gp heH 

= J2 J2^9hi9-'^)h + a^rf + le {1 + Z{0 k[G])) , 

geGp heH 

and so ker^ C {1 + :S{Dk[G])). 

From [llj Theorem 1, we have that -3(Fg[G]) will be generated by the set {g — IjggCp- If 
we let K be such that k = Wg, the exactness of the second sequence now follows from the 
first by factoring through by vr. ■ 

For any field F we let Jfig] '■ F[G] — )■ F[G] be the F-linear group algebra involution 
defined by the F-linear extension of JF[G]{g) = g~^ for g & G. When there is no confusion 
we shall refer to Jf[g] simply as J and for ease of notation we will usually denote J{a) by 
a. We now define ^ = {1, J} as the cyclic group of order 2 generated by the group algebra 
involution. 

Lemma 2.2 Using Tate cohomology, the augmentation map onOK[G] (resp. ¥q[G]) induces 
the following isomorphisms: 

H\g,OK[GD^H%g,o''' 



K> 



i^°(^,FjG]^)^i^°(^,F 



x^ 



Proof. We only prove the first result as the second follows immediately by letting K be 
such that k = ¥q and factoring through by vr at every step. 

For ease of notation we let -3(Dx[G']) = ^. From the short exact sequence in Lemma [?!T] 
we obtain the following long exact sequence (see [5] VI §5 for details). 

...-^H\g,{i + z))^ H%g,OK[GY) ^H\g,k{HY)^ 

H\g,{i + 2)) ^H\g,OK[GV)^--- 

We restrict the norm map associated to g to the map N* : {1 + Z)g — > (1+5)^, 
where (1 + :^)g = (1 + 5)//g(l + Z) = {I + Z)/{aa-^ : a G (1 + ^J)}. Then, by definition, 
H^{g, (1+5)) = coker(iV*) and ^o(^, (1+5)) = ker(A^*). See [3J VI §4 for full details. 



We see that coker(A^*) = (1 + Z)^/N{1 + ;j). If x G (1 + Z)^ then N{x) = x^ and so 
((1 + 5)^)^ ^ N{1 + 5). We know that (1 + 5) is a pro-p group and {p, 2) = 1, therefore, 
from [18j IV Proposition 4.2.1, z/;^ : a — )■ a^ for a G 1 + -3 is a group automorphism of 1 + ^. 
As ( 1+^) = (1 + Z?, we know (1 + ^J)^ = ((1 + Zf)^. If we let (1 + jf G ((1 + 5)')^ we 
have (1 + jy = (1 + jY- The group G is abehan so J is a group automorphism on (1 +5), 

2 

therefore (1 + j) = (1 + j)^ (= (1 + j)^) and as ip'^ is an automorphism of 1 + ^, we have 
l+j = 1+j. We then have {l+Z)^ = ((1 +5)^)^ which implies that (1+5)^ C N{l+Z)- 
We therefore see that H^{g, (1+5)) = {I}- 

Now let X G ker(iV*), this means N{x) = xx = 1 and therefore x = x^^. As above, we 
can write x^^ = IP' for some 6 G (1+5). Therefore a: = 66~^, so a; G {aa~^ : a G (1 + 5)} = 
IgiX + 5)- Therefore, if x G ker(A^*) then it is represented by 1 in (1 + Z)g so we must have 

The group ^ is a finite cyclic group so from |3] III §1, we know that H^iG, (1 + 5)) = 
Ho{G, (1 + 5)) for all odd i. Therefore, H\g, (1 + 5)) and if°(^, (1 + 5)) are trivial and 
the long exact sequence above shows us that we have an isomorphism H^{g, {Ok[G])^) = 
H^{Qi {k{H])^) induced by the map 6. As a result we observe that the prime-to-p projection 
map will induce an isomorphism H^{G, {Ok[G]Y) = H^{G, {Ok[H]Y). 

Recall that the group H is abelian, of odd order and char{k)l\H\. We can decompose 
K[H] as 

K[H] = ir X Li X La X • • ■ X L„ X (L; X L[) x (^ x 4) x • • • x {L'^ x L'J 

where the Li and L' are all unramified extensions of K and the coefficient in K is obtained 
by the map Sh '■ K[H] — )■ K given by Snih) = 1 for h E H. The group algebra involution, J, 
will be an element of Gal{Li/K) and will act on the (L' x L') by switching the components. 
As I if I is a unit in Ok we know that Dk[H] is the unique maximal order in K[H], see 
[T7] Chapter 9, §41 Theorem 41.1. Therefore, 

Ok[H] ^ Ok X Di, X Di, X ■ ■ ■ X Dl„ x {Ol>^ x Ol',) x (D^/ x Dl'^) x ■ ■ • x (D^;^ x Ol'J- 

If (m,!!) G {{Op- X Di?-)^)^ then (M,f) = {v,u) so u = v. We then have {u,u) = 
il,u)iu, 1) = il,u)0~uj so'h^G, (Dl, X Dl^) = {1}. 

Standard theory also gives us H°{Gal{Li/K),Dl) = D^/N{Dl) = k"" /N{lf) = {1}, 
where li is the residue field of Lj (see for example, [21] V §2 Prop 3 and XIII §2). There- 
fore, the map Eh ■ K[H] -^ K induces an isomorphism H^{g,{DK[H]Y) = H°{g,D^). 
Combining this with the isomorphism iL°(^, {Dk[G]Y) = H^{g, {DK[H]y) we see that the 
augmentation map on G induces the desired isomorphism. ■ 

Let F/E be a Galois extension of fields and let a E F. We define the resolvend of a as 

rp/Eia) = Yl 9{a)9~^, 

g&GalF/E 

and let Rp/Eia) be defined as 

Rp/Eia) = r{a)r{a) = J^ TF/Eia,g{a))g. 

geGal{F/E) 



We now let L/K and F^n/Fg be Galois abelian extensions of fields and let G = Gal(L/i^) 
and G = Gal(F,n/Fg). 

Lemma 2.3 1. Let x G A^/x be an integral normal basis generator for A^/x, i-^-, 
Aljk = Ok[G].x (this means that we suppose L/K is at most weakly ramified). Then 

RL/K{x)e{OK[G]r. 

2. Let y G F^n be a normal basis generator for Fgn overWg, i.e., F^n = FglG].?/. Then 

i?F,„/F,(y)G(F,[G])\ 

Proof. Part L 

By definition, we know that Tl/k '■ Al/k x Al/k — ;■ Ok, so clearly Rl/k{x) G D/^-fG]. 

Let p be the regular representation of the group G. For g & G, the matrix p{g) will have 
a 1 in the position {h, gh) for all /i G G and a in every other position. As the trace form 
is a G-invariant symmetric form, and as G is abelian we know that 

TL/K{gix),x) = TL/K{x,gix)) =TL/Kih{x),hg{x)) = TL/Kih{x),gh{x)) 

for all g,h & G. If we use g E G as a. basis for D/<[G] we see that the matrix p{Rl/k{x)), 
representing Rl/k{x) = J2qeG'^L/K{g{x),x)g must have the coefficient TL/K{g{x),x) = 
TL/K{h{x),gh{x)) in the position {h,gh) for all g,h G G. Therefore, after relabeling, 
p{Ri/k{x)) is represented by the matrix (Ti/K{g{x),h{x))). 

Since {g{x) : g G G} is a basis for A^/k over Ok, we know that 

det{TL/K{g{x),h{x)))OK = [A'^/K ■■ Al/k]Ok 

(see p] III 2.8), but ^f /^^ = ^l/x, so det{TL/K{g{x), h{x))) = detp{Rx) must be a unit. 

We now let G be the group of irreducible characters of G over a fixed algebraic closure 
of K. The regular representation, p, is equal to the sum of the irreducible representations 
so we know that 

detp(i?,) = H det^iRL/Kix)) = J] xiRx). (1) 

xeG xeG 

The group G is finite and abelian so there exists a finite extension F/K, over which the 
irreducible characters of G are realisable. We then have F[G] = IlyeG ^ ^^^ ^^^ isomorphism 
is given by Y^g^afgd ^ UxecT^geG fgXig)- For more details see, for example, ^ §6.2. 

For each x e G we know that x{Rx) = J2g(zG'^L/K{x,g{x))x{g), that x(fi') e Op (see [22] 
6.5 Prop. 15) and that TL/K{x,g{x)) is an element of Ok ^ Op- Therefore x{Rx) G Op, 
and from Eq. ([T]) we know that x{Rx) niust be a unit in Op. 

Under the isomorphism mentioned above £'ir[G] C IlvgG^i^ — ^ ^^^ 9Jt is a maximal 
order. The element Rl/k{x) is represented in 97t as YlxeGXiRL/xix)). We have seen above 



that x{Rl/k{x)) is a unit in Dp for all x ^ G*? so Rl/k{x) is invertible in Wl. As Dp /Ok 
is a finite ring extension we have 971^ fl DA'iC] = Ok[GY , see [IT] Ch. 6 §25. Therefore 
RL,K{x)eOK[GY. 

Part 2. We now let K he a. local field with k = ¥q. Let L/i^ be the unique unraniified 
extension of degree n. We then have the residue field of L, denoted /, being isomorphic to 
Fgn. From [21], IV Prop. 4 we see that vl{T)lik) = and so A^jk = O^. Let vr be a 
uniformising parameter of Ok, then the Jacobson radical of Ok is ttDj^. By assumption we 
have I = k[G].y which implies that Dp — OK[G]-y mod tiOl. Therefore, by Nakayama's 
lemma (see [1], Ch.2 Prop. 2.6), we have x G Ol is an integral normal basis generator for 
Dl ii X = y mod ttOl- Using part 1. Rl/k{x) G {Ok[G])^ for all x = ?/ mod ttDl and 
therefore i?vfc(2/) G( A; [G])\ 



Notation 2.4 For a Galois extension of fields F/E with Galois group T we define the action 
o of E\r] on F. For a = "^^i^-p (^il ^ -^[^1 o^^t? V ^ F , then 

aoy = ^a^7(j/). 

We recall that the resolvend of y is defined as rp/piy) = X]7er7(?/)7~^- 

A straightforward calculation then shows, for w G Dii:[G'], that wr{y) = r{w oy). 

Theorem 2.5 1. Let x G Al/k be an integral normal basis generator for Al/k, then 
Rl/k{x) = uu for some u G Ok[GY Oj'i^d u~^ o x is a self-dual integral normal basis 
generator for Al/k ■ 

2. Let y G ¥gn be a normal basis generator for ¥gn overWg, then Rf „/f (y) = vv for some 
V G Fg[G']^ and v~^ o x is a self-dual normal basis generator for ¥gn over ¥q. 

Proof. Part 1. We first note that from Lemma 12.31 we have Rl/k{x) G Di^[(j]^. From 
Lemma 12.21 we know that the augmentation map e : g ^-^ 1 for g & G gives an isomorphism 
H°{g, {DK[G]y) = H°{g,D^). We know that D^ is invariant under G, so H°{g,D^) = 
D^ / {O^y . A straightforward calculation, left as an exercise, gives e{RL/K{x)) = TrL/xix)'^. 
Therefore Rl/k{x) is represented by 1 in H^{Q, {O k[G\)^ ) , and so we can now write Rl/k{x) = 
uu for some fixed u G {Dk[G])' 



We have Rl/k{x)) = rL/K{x)rL/K{x) = uu and L[G] is a commutative ring, so u ^rL/K{x)u ^ri/xix) 
1. Therefore, rL/xiu"^ o x)rL/K{.u~^ o x) = 1. We now let x' = u~^ o x and note that 
Rl/k{x') = Y.geG'^L/K{x',g{x'))g = 1. This means that TL/K{x',gix')) = 5i^g ior g e G 
and, as the trace form is G-invariant, T^/Kigix'), h{x')) = 6g^h for g,h E G. 

Finally, as Al/k = Ok[G].x, clearly x' G Al/k- Therefore, applying [16] Lemma 8, we 
see that x' is an integral self-dual normal basis element for Ap/x- 



Part 2. We first note that that any element y' G F^n with the property T^ n/Fg{y', qW)) = 
5i^g for ^ G G is necessarily a normal basis generator for F^n over Fg. The result then follows 
from exactly the same arguments as part 1. but using the corresponding statements for finite 
fields in Lemmas 12.21 and 12.31 



We remark that Theorem 12.51 gives an alternative and constructive proof of the existence 
of a self-dual integral normal basis for both A^jx with L/ K odd, weakly ramified and abelian; 
and for F^n over Fg for q and n odd. 

The method we shall use for the constructions in this paper (with the exception of the 
totally, tamely ramified case for local fields) will be to describe a normal basis generator and 
then calculate the units u and v in Theorem I 



Notation 2.6 Let R he a commutative ring with identity and let r G R^ , i.e. r is the square 
of some element in R. Throughout we shall use Jr to denote some element in R such that 
(-y/r) = r. We note that ^/r need not he unique, hut this does not limit the constructions 
descrihed in the sequel. 

3 Finite Fields 

In this section we describe how to construct self-dual normal bases for any finite extension 
of a finite field for which they exist. We first prove a lemma which will be very useful in the 
sequel. We do not restrict ourselves to finite fields for this result. 

Lemma 3.1 Let F\jE and F2/ E he ahelian Galois extensions with Fi (1 F2 = E and F = 
F1F2. For 2 = 1,2 letVi = GdX{Fi/ E) and let Xi & Fi he a self-dual element for Fi/E in the 
sense that Tp/E{gi{xi), hi{xi)) = Sg^^hi for gi,hi G Fj. Then xix^ is a self-dual element for 

F/E. 

Proof. We first observe that, as the trace form is Fj-equivarient, we have Tp/E{gi{xi), hi{xi)) = 
Sg^^hi if and only iiTp/E{xi, gi{xi)) = 6i^g.. With a slight abuse of notation we have Gal(F/ii^) = 
Fi X F2 with Fi being the fixed field of Tj when i ^ j. Therefore, with gi G Fj we have 

^F/e{xiX2, {gi,g2){xiX2)) = TfJe{xi, gi{xi))TF2/E{x2, g2{x2)) 

' I a g = h=l 

otherwise. 



Let p be a prime and q be some power of p. Let Fg be the finite field of q elements and 
consider a finite extension of ¥q of degree m with Galois group G. This extension is uniquely 
defined, up to isomorphism, by m and is denoted F^m/F, with G = Gal(¥qm/¥q) = Gm where 
Gm is the cyclic group of m elements. As discussed in the introduction, if p 7^ 2, then F^m 



admits a self-dual normal basis if and only if m is odd. If p = 2, then F^m admits a self-dual 
normal basis if and only if the exponent of G is not divisible by 4. 

We have m = p^.d for some n,d G Z~^ and F^™ = F^dF^p" with F^d flF^p^ = ¥g. Any self- 
dual element in a field extension is necessarily a self-dual normal basis generator. Therefore, 
from Lemma l3.ll if we have a self-dual normal basis generator for ¥gd/¥q and for F^p^/F^ 
then the product will be a self-dual normal basis generator for F^m/Fg. We are thus reduced 
to finding self-dual normal bases when m is either a power of p or when m is coprime to p. 

3.1 p-extensions of finite fields 

We now consider the extension F^p^/F^ of degree p". In [19] §4 Semaev explicitly constructs 
a normal basis generator for F^p" over Fg. We include an outline here for completeness; for 
full details see [19j . 

The construction makes use of the following lemma. 

Lemma 3.2 An element rj G F^p" is a normal basis generator over ¥g if and only if 

Proof. See [IDj §4 Lemma 4.1 ■ 

Assume that tjq is an element of Fg such that Tr^ /^ ivo) ¥" 0- Fo^ i > 1 we define 
fi{X) G F pi-i [X] and r/j G F pi inductively as follows. 

and Tji is an arbitrary root of fi{X). From [19] §4 each polynomial fi{X) is irreducible over 
F pi-i and Tvf . /p (rji) ^ 0. Therefore, from Lemma [3. 2[ ?7„ will generate a normal basis for 

y qP 

Fgp" over Fg. 

For any polynomial f{X) = Y2i O'iX^ we let f{Xy = ^^ a^ X*, then the minimal poly- 
nomial of ?7 = T]n over Fg is 

n f-(^y' 

3=0 

(see pSj §4 for full details). 

To construct tjq we define the finite field F' such that Fp C F' C Fg, [Fg : F'] is prime to 
p and [F' : Fp] is a power of p. As above, we then construct rj' G F' such that r]' is a normal 
basis generator for F' over Fp. We can then take rjo = rj' E Fg as [Fg : F'] is prime to p. 

Theorem 3.3 Letp be an odd prime and n be any integer. Let rj be a normal basis generator 
for Fgp" over Fg constructed as above and let Cp^ = G = Gal(Fgp"/Fg). Then Rf „/¥q{r]) is 
a square in Fg[G']^ and using Notation \2.6[ then 

1 

— o rj 

is a self-dual normal basis generator for Fgp" over Fg. 

9 



Proof. From Lemma 12.11 we have the exact sequence 

1 ^ 1 + a(FjG]) ^ FJG] >^ A F^- ^ 1. 

where e is the augmentation map and ^(Fq[G]) is the Jacobson radical of Fg[G']. We observe 
that F^ C F^[G']^ so there exists a natural embedding, j : F^ — )• Fq[G]^ which has the 
property ej = Ipx . Therefore the short exact sequence is split and 



FjG]^=F,^xl + 5(FjG]). 

A straightforward calculation, left as an exercise, shows that e{Rw n/Wqiv)) = Tr^ n/Fgl'?)^, 
and so ^(-Rf pu/Wqiv)) is a square in F^ . The group 1 +-3(Fg[G]) is a p-group with (p, 2) = 1, 
so every element of 1 +^(Fg[G']) will be a square. Therefore, we can write Rf „/Fq{v) = ^^ 
for some w G F^ [G] ^ . 

From Theorem 12.51 we know that Ry „/f (^7) = vv for some v G Fg[G]^. We then have 

w'^ = vv and w"^ = w'^ = vv = vv, therefore w"^ = w"^. Since w G Fg[G]^ we can write 
w = {wi,W2) and w^ = {wl,wl) with wi G F^ and W2 E 1 + ^(¥q[G]). We then see that 
W = {wi,W2) and W"^ = {wl,wl) = w"^. The group 1 + 5(Fg[G]) is a p-group with (p, 2) = 1 
so %Ij2 '■ a ^ a? is an automorphism of 1 + 5(Fg[G]). Therefore, if w\ = w\ then W2 = W2, 

and so w = w. If we then write w = ^/Rf „/f„(^) our result follows from Theorem [2? 



qP 



Remark 3.4 IfWg is of characteristic 2, then, from /^ Theorem 6.1, we know that a self- 
dual normal basis exists for F^p" over Fg if and only if the exponent of G is not divisible 
by 4. In the setting of this section that would mean n = 1. If we let ^ & Fg2 be such 
that Tr^^^/FqiO = 1 then Tri^,0 = Trie) = Tr{0^ and Tr{i,g{i)) = 2iV(0 = for 
g G Gal(Fq2/Fg). Therefore ^ will be a self-dual normal basis generator. 

3.2 ^-extensions of finite fields 

We now consider the extension F^d/Fg with Galois group G = Cd where c? = rMs a power 
of some odd prime r ^ p. We begin, after Semaev [12], by describing how to decompose 
Fgd into sub-Fg-vector spaces that are stable under the action of G. This decomposition is 
directly related to the standard decomposition of the group algebra Fg[G], which we shall 
use in the latter part of this section. However, since the first aim is to give an expression for 
a normal basis generator in terms of roots of a polynomial irreducible over Fg, we first need 
to describe the explicit decomposition of Fgd. 

In fact we first need to pass to a slightly bigger field to get the relations we need between 
q and r. We let v be the order of q modulo r and let gi = q^ . We remark that (f , d) = 1 and 
that if g = 1 mod r, then q = qi- 

We observe that Gal(Fgd/FgJ is generated by the Frobenius element, ^g^ which acts as 
(/)g^ : X ^-^ x'^^ for X G Fgd. With this in mind we define the equivalence relation, ~, on the 
set {0, 1, . . . , (i — 1} as 

Si ~ S2 if and only if si = S2qi mod d 
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for some n G Z. We then let Sg-^ be a set of representatives for the equivalence classes of 
{0,1, . . . ,d — 1} under ~. 

Let C be a primitive (gi — l)th root of unity in Fg^, then the order of ( in F^^ is gi — 1 
and X'^ — C is irreducible over Fg^ (see [19j §2). Let 6 e F^d be a root of X'^ — (, we then 
have Fgd = Fgj(6') and we will now describe a normal basis generator of F d/F^^ in terms 
of 6. Let Vs be the sub-vector space of F^d spanned over Fg^ by the elements of the set 
{0* : < t < rf - l,t ~ s}. We note that Vs H Vt = Fg, if and only if sr^t and that 
4'qii^s) = K- From [19j §2 we then have 



Fgd = n Vs. 



From [19], Lemma 2.1 we know that for ^ G Fg^, then ^ is a normal basis generator for 
F d/Fg^ if and only if ^ has a non-zero component in each Vg under this decomposition. In 
particular, we note that ^ = X]sg5 ^* ^^^ ^^^^ property. If ^ is such an element, from [T^] 
Theorem 2.4 we then know that Tr^ ^/f ^(0 "^ill be a normal basis generator for Fgd/Fg. 
Therefore, 

is a normal basis generator for Fgd/Fg. 

From Theorem 12.51 we know that Rf ^/f iv) = "^"^ fo^ some v G Fg[G]^ and that v"^ o r/ 
is a self-dual normal basis generator. Our aim now is to construct v. 

The group G is a finite cyclic group of exponent d = r"^ and the characteristic of Fg does 
not divide d. We let Q be a fixed primitive dth root of unity and let Fg = ¥g{(d)- Let 
G = Hom(G,F^) be the character group of G over Fg and for x G G define Fg(x) as the 
field obtained from Fg by adjoining the values xio) fo^' ^-H 9 ^ G. Let g he a fixed generator 
of G and define Xi ^ G as Xi '■ 9 ^^ Cd fo^ i G {0, 1, . . . , c? — 1}. From [12] Ch.4 Theorem 1.4 
the map Xs '■ ^q[G] — )• Fg(xs) induces a decomposition isomorphism 

D:¥g[G]^ll¥gixs) 

s&S 

where S* = 5'g is the set of representatives of equivalence classes described above. 

Let DR and Dv be the images of R^d/f [f]) and v respectively under this isomorphism. 

We then have Dv = Ylses^s for some Vg G Fg(xs) and DR = DvDv = Ylses'^sV^- '^° 
calculate the image of an element under the inverse of the decomposition map D, it is only 
required to solve a set of 15*1 simultaneous linear equations. Therefore, we are just left 
with the task of calculating the action of J on ¥g{xs) and finding Vs G Wq{xs)^ such that 
XsiRw d/^qiv)) = "^sV^ for each s E S. In the following three lemmas we describe how to 
calculate Vg for all s E S. 

Lemma 3.5 
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Proof. We have Wq{xo) = ¥g and J will act by fixing the whole field. The character xo 
is actually the same map as the augmentation map e, so we know that Xo(-Rf ^/f iv)) = 
(TrF a/¥,{v)y- Therefore, with vq = v^ = Tr^ j^^ij]) we have Xo(^f ^/f,!'?)) = ^o^^(= ^^o)- 



For 7^ s G S", we define s' to be the representative of {d — s) in S. 

Lemma 3.6 Let s E S be such that s ^ s' , then 

Vs = Xs{rF^a/¥giv)) and Vs' = 1 for s < s' . 

(Recall that S can be thought of as a subset of {0, . . . ,d — 1} so that < is defined.) 

Proof. Assume s ^ s', then J acts by switching the components of ¥q{xs) and ¥q(xs') in 
the decomposition. We know that Rf ^/Vqiv) is fixed by J, so we must have XsiRw d/fqiv)) = 
Xs'iRw^a/^qiv))- Therefore, for s < s', if we let v^ = XsiRw^a/VgV) and v^' = 1, then 



If s = s' we remark that Q will be a subgroup of Gal(Wq{xs)/^q), and so Gal(Wq{xs)/^q) 
will have an even order. Therefore any element of ¥q{xs)^ , i-e., any element of ¥q{xs) that 
is fixed by Q, is a square in ¥q{xs)- 

When s = s' we will need to give different values of f ^ depending on whether XsiRw ^/Fq (^7)) 
and/or -Xs{R¥^a/^,,iv)) are squares in ¥q{xs)^- 

Lemma 3.7 Let s E S be such that s = s' and recall Notation \2.(A 
1. IfXsiRw d/^qiv)) «s a square in ¥q{xs)^ , then 



Vs= ^Xs(^F^,/F,(r/)). 



2. If neither XsiRw d/fqiv)) ^^ir — Xs(-Rf d/fgiv)) ^'^s squares in ¥q{xs)^ (they will still be 
squares in ¥q{xs)), then 

Vs = ^J-Xs{R¥^d/v,{v))■ 

3. IfxsiRw^a/Fgiv)) «s not a square in ¥q{xs)^ but -Xs{R¥^a/^qiv)) ^s a square m ¥q{xs)^ , 
then 

^{n-l)xs{Rw^j¥,{ri)) y/-Xs(^F^,/F,(^)) 



-n \/ —n 
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where n is the smallest integer in the set {1, ... ,p — 1} such that —n is a square in Fp. 

Proof. If s = s', then J G Gal(Fg(xs)/Fg) and ^ is a subgroup of Ga\{W ^{xs) /^ q) ■ We 
remark that this means [Fg(xs) : Fg] is even, which only happens when the rth roots of unity 
are not contained in Fg, i.e., r/g — 1. We know that Xs{.R¥ d/F, (^7)) ^ ^^(Xs)^ and \Q\ = 2, 
so from the properties of finite field extensions, XsiRw d/^qiv)) is a square in Fg^Xs)- 
For brevity we now write a = Xs(-Rf d/fqiv))- 

1. If a G (Fg(xs)^)^ then ^/a is fixed by J and ^/a.J{^/a) = a. 

2. If -a ^ {¥y{xs)^y, then J(a/^) = -^/^ and a/^. J(a/^) = 



a. 



3. Finally, suppose that a ^ (¥q{xs)^)'^ and —a G (Fg(xs)^)^, then a basis for Fg(xs) over 
Fg(xs)^ is {a/a, a/— a} with J{y/a) = —y/a and J(-\/^^) = a/— a. 

Let n be the smallest integer in {1, . . . ,p ~ 1} such that — n is a square in ¥p (note 
that — (p — 1) is always a square so n is well defined). This means that — (ra — 1) is 
not a square in ¥p. Note that since a^ (Fg(x)^)^ and — aG (Fg(x)^)^ we must have 
-a^ ^ {¥g{x)^Y and therefore -1 ^ (Fq(x)^)^. We then know that -1 and -{n - 1) 
are not squares in ¥p, and so (n — 1) is a square in ¥p. Moreover, J fixes ^/r^^^ and 



^— n, therefore 



J 



V^T^l 



'—n 



v^ + 



and so 



v/^^"^T 



— n 



'— n 



.J 



v/^^"^! 



-n 



-Va) 



—n 



-n 



v/^^"^T 



-n 



—n 



—a, 



77, 



a. 



-77 



We remark that to calculate the image of an element under the inverse of the decompo- 
sition map D, it is only required to solve a set of 15*1 simultaneous linear equations. 

Theorem 3.8 Let v = D^^{Dv) where Dv = Hsg^'^s with Vg as described in Lemmas \3.5[ 
\3.6\ and 3.7. Let rj be a normal basis generator for ¥gd/¥q constructed as above, then 



rj = v~ o rj 
is a self-dual normal basis generator for ¥gd over¥q. 
Proof. This now follows directly from Theorem 12.51 and Lemmas 13. 5[ 13.61 and 13.71 



Remark 3.9 We originally proved Theorem \2.5\ only for ¥q with characteristic not equal to 
2. However, this construction is still valid when p = 2 and 2j(d, so we have now constructed 
self-dual normal bases for finite extensions of finite fields whenever they exist. 



13 



4 Local Fields 

Throughout this section we will always assume p to be an odd prime and Ji' to be a finite 
extension of Qp. We fix an algebraic closure of K, denoted K, and let L/K be a finite Galois 
extension inside K with abelian Galois group G. Let Dk (resp. Ol) be the valuation ring 
of K (resp. L) and let / and k be the residue fields of L and K respectively. Recall that we 
define A^/k to be the unique fractional D^-ideal such that 

From [7] Theorem 4.5 and [6] Theorem 1, we know that a self-dual integral normal basis 
for Aljx exists if and only if L/K is at most weakly ramified (this result is valid even if G 
is not abelian). In this section we describe how to construct such bases whenever they exist, 
providing G is abelian and that the residue field of K is not of characteristic 2. 

4.1 Reduction of the Problem 

We begin by proving a series of results that will reduce the situation to finding self-dual 
integral normal bases for Al/k when L/K is either totally ramified or unramified. 

Proposition 4.1 With L/K as above, there exist fields L',L^'^,L*°^ C K such that 

1. L'/L is an unramified Galois extension of fields, 

2. L' = L""L*°*, 

3. L^°^ / K (resp. L^^ /K) is a totally ramified (resp. unramified) Galois extension of 
fields. 

Proof. The fact that L is contained in the compositum of a totally ramified and an unram- 
ified extension of if is a direct result of the construction of the maximal abelian extension 
of K in local class field theory. See, for example [lOj §7.4. We give here a constructive proof 
that ensures that this compositum is an unramified extension of L. 

Let m denote the exponent of G = Gd\{L / K) . Let Go be the decomposition group of G 
and let n = |G/Go|. Then the field fixed by Go will be the unique unramified extension of 
K of degree n, denoted K^n, and will be the maximal unramified extension of K contained 
in L. We note that Gal{K^^/K) = Gn and that n\m. 

We now consider the unique unramified extension of K of degree m'^ in K. We observe 
that Gal{KJ^^/K) = G„2 and Gal(/s:^7^D = Cmyn- We let L' = LKl/^^ be the composi- 
tum of L and K'^^ inside K and let G' = GaA{L' / K) . We observe that L'/L is unramified of 
degree mV^ and that Gf, ^ Go. We have G'/G'^ ^ Gai^K"!/^^ / K) = G^2 and that \G'q\ = |Go| 
divides m. Let a G G' be any element that maps onto a generator of Gal{K^^ /K) when we 
quotient G' by Gq, then < a > is a subgroup of G' isomorphic to Gm'^. We let F be the field 
fixed by one such subgroup, see Fig. [T]for details. 

2 

We now claim that F fl K"^ = K. Indeed, suppose not and that there exists an integer 



s\m' with FHKZ =Ki^. 
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G'q=Go 



un 




Figure 1: The extension V /K and intermediate fields 



• If s < ra, tlien Kf^^ C KJ^^ C L. In this case we let H be the subgroup of G that fixes 
i^^„ and note that the exponent of H is less than or equal to m (as m is the exponent 
of G). 

• If s > n, then K^^tL, but K^^ C K^^L. In this case we let H = Gal{K^^L/K^J = Go 
and again note that the exponent of H is less than or equal to m. 

With H defined like this we must then have Gal(L'/i^^„) < Gm-^/s x H. The exponent of 
Gal(L'/i^^„) is then at most /cm(|iJ|, \Gm'2/s\), and so is at most lcm{m,rn? / s). However, 
as ii'^„ C F we must have C^a as a subgroup of Gal(L'/_K'^„), and so the exponent of 
Gal(L'/i^^^) must be at least w?. Therefore the exponent of Gal(L'/K^^) must be w? 
which means s = 1, and so F fl K"^^ = K. This in turn means that F/K is totally ramified, 
that V = FK:^^ and that G' ^ G'^ x C„2. 

Finally we observe that L' = L^n is the unique unramified extension of L of degree 
m? /n contained in K. ■ 



Lemma 4.2 Let Li/ K and L^jK he abelian Galois extensions in K such that Li/ K is 
unramified, Li (1 L2 = K and L1L2 = L. Let xi (resp. X2) be a self-dual integral normal 
basis generator for A^-^/k (resp. Al^/k)- Then X1X2 is a self-dual integral normal basis 
generator for A^/k ■ 



Proof. From Lemma [3.11 we know that TrL/x{xiX2, (xiX2)^) = (5i,g for all g G Gal(L/i^). 
From [8] III. 2. 15 we know that 'Dl/k = '^l/Lz'^Lz/k and hence A^/k = Al/l^Al^/k- 
We know L/L2 is unramified, so Al/l^ = ^l- Therefore, vl{Al/k) = vl{Al2/kOl) = 
vl2{.Al2/k)- The element xi must be a unit in Oli so vl{xiX2) = vl{Al/k), hence a;ia;2 G 
Al/k- The result now follows from [16] Lemma 8. ■ 
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Lemma 4.3 Let L/K be an abelian extension with Galois group G. Let H he a subgroup of 
G. For X e L, ifTrG{x,g{x)) = Si,g for g E G, then Tr^G/H){TrH{x),TrHgix)) = Si,g for 
g e G/H. 



Proof. 



Tr(^G/H){TrH{x),g{TrH{x))) =Tr^G/H) \ \ 2_^ hix) ] g \ 2_^ /i2(x) 

zeH 



Tr 



(G/H) 



H&H J \h2eH 

J2h,{x)] (j2gh,{x)\] 
neH J \h2eH J J 



Tr{G/H) I Y^ Y^ hi{x)gh2{x) 

\hieH h2eH 



Tr(^G/H) 



Kh, 



y y hi{x)ghhi(x) j where h2h^ ^ = h 
iieH heH J 

Tri^G/H) y^ y^ hi{x)high{x) 1 as G is abelian 

\hxeH heH 

Tr{G/H) I 5^ ^hi{x.gh{x)) 

hieH h£H , 

Tth f J^ x.gh{x) j j 
Ttg f ^ x.~gh{x) j 



KhieH h£H 

Trt^G/H) 



By hypothesis TrG{x.gh{x)) = unless g = h~^. The only time this can happen with h E H 
and g G G/H is when g = 1 and h = 1. Therefore, Ttg {YlheH ^-d^i-^)) ~ ^^,9 which proves 
the result. ■ 



Theorem 4.4 Let L' , L"" and L*°* he as in Proposition 4-1 and L/K be as set out at the 
beginning of this section. Let Xun (resp. Xtot) be a self-dual integral normal basis generator 
for Ax^un/j^ (resp. Aj^tot/j^), then 

Trx^i/l[XunXtot) 

is a self-dual integral normal basis generator for A^/k- 

Proof. From Lemma 14.21 we know that XunXtot will be a self-dual integral normal basis for 
^u /K- From Lemma H73] we know that Tr^i ji^XunXtot) will be a self-dual element of L, and 
so using [16] Lemma 8 we just need to show that TrL'/L{,XunXtot) ^ Al/k- It is therefore 
sufficient to show that Tr^i iL^Ay ik) C A^jk- 

The extension L' / L is unramified so we know that "^vil = ^l'- From [21] III §3 
Proposition 7, we therefore have Ttli/l^Ali/k) C Al/k if and only if Al'/k ^ Al/kOl'- 
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However, as V /L is unramified we have vli{'Dli jk) = vl{Dl/k), which imphes vl'{Al'/k) = 
vl{Al/k) = vl'{AlikOli). This now imphes Alijk = A^/kOl', which proves the resuh. ■ 

With p an odd prime, K a finite extension of Qp and L/K any finite weakly ramified 
abehan extension of odd degree we can using Proposition 14.11 and Theorem 14.41 to reduce 
the problem of finding a self-dual integral normal basis for A^/k to finding self-dual integral 
normal bases for Aitot/x and Aiun/^- We therefore continue considering the totally ramified 
and the unramified cases separately. 

4.2 Totally Ramified Extensions 

Any totally ramified abelian extension of K will be contained in some division field arising 
from a Lubin-Tate formal group. We will give a brief overview of the definitions of such 
division fields and some of their properties. For a more detailed account see, for example, 
[in] or [20]. 

Recall that K is a finite extension of Qp and i^ is a fixed algebraic closure of K. Let vr 
be a uniformising parameter for Dk and let q = IOk/^^kI be the cardinality of the residue 
field. We let f{X) E XDk[[X]] be such that 

f{X) = TvX mod deg2^ ^nd f{X) = X'^ mod tt. 

There then exists a unique formal group Ff{X,Y) G Di^[[X, y]] which admits / as an 
endomorphism, i.e., Ff o f = f o Fj and Ff{X,Y) satisfies some identities that correspond 
to the usual group axioms, see [20] §3.2 for full details. For a G Ok, there exists a unique 
formal power series, [a]j(X) G XD/4'[[X]], that commutes with / and such that [a]j(X) = aX 
mod deg2. We note that these conditions ensure that [7r]j(X) = f{X). 

We can use the formal group, Fj, and the formal power series, [a]/, to define an Ok- 
module structure on *p^ = |J^*Pl, where the union is taken over all finite Galois extensions 
L/K where L C K. We let E/,„ = {x G ^3^ : [7r"]/(x) = 0} and Ef = U„^/,n and then 
define K-^^n = K{Ef^n) and K^, = K{Ef). We remark that the sets Ef^n and Ef depend on 
the choice of the polynomial / but due to a property of the formal group (see [20] §3.3 Prop. 
4), Kj^^n and K,^ depend only on the uniformising parameter vr. The extensions Kj^^n/K and 
Kt^/K are totally ramified abelian extensions, [K.„-^n '■ K] = q'^~'^{q — 1) and every totally 
ramified abelian extension of i^ in ^ is contained in i^^ for some tt. When using Lubin-Tate 
division fields we shall always assume that f{X) = [tt]{X) = X^ + ttX. 

In this section we give different constructions for self-dual integral normal basis generators 
for Al/k depending on whether L/K is tamely or wildly ramified. 

4.2.1 Totally Tamely Ramified Extensions 

Let L/K be a finite totally tamely ramified abelian extension with [L : K] = d and d odd. 
We know that L must be contained in K^^^n for some uniformising parameter vr of Ok and 
some integer n. The degree [K.„^m+r '■ -^7r,m] is a power of p for all m,r G N and m > 1, 
therefore L C K^^i. As described above, we let f{X) = [vr](X) = X'^ + nX and K^^^i/K is 
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the splitting field for the polynomial X"^^^ + vr. The (g — l)th roots of unity are contained in 
K (see [5], Theorem 25) and d\{q — 1), therefore L/K must be a Kummer extension. Letting 
TT = — r we see that the field L will then be the subfield of K^^i that splits the polynomial 
X"' - T. We let T^/'^ be a root of X'^ - r, then L = K{t^/'^). 

Lemma 4.5 Tri/i^(r*/°') = /or a// c^/i. 

Proof. The minimal polynomial of r'/'^ over K is X'^/^'^'^^'''^)— r*/^'^'^*^*''^^ therefore Tri/K^T^^^) = 
for all dj(i. m 



Lemma 4.6 Let 

^{l-d)/2d j^ ^{3~d)/2d + . . . + T--l/d ^l^ ^l/d + _ _ _ + r^d-l)/2d 



X 



d 

1 / 1-r ' 



^(l-d)/2d 



d yi-T^'^ 

then TrL/K{x,g{x)) = 6i^g. 

Proof. We have x = bo + hr^^'^ + h2T^''^ + . . . + fed-ir^'^-^)/'^, with 

6o,&i,...,&(d-i)/2 = l/c? and 6(rf+i)/2, &(d+3)/2, • • • , &d-i = V^c?- 
Let Qk : r^/'^ i-)- ('^t'^/'^ and x^ = 5'fc(a;). We see that 

d-l 
i=0 

and so 



-1 d-l 
XXfi 

i=o i=o 



^5^6,6,CV(^+^')/'^. 



From Lemma I4.5[ we know that 
unless d\{i + j). Therefore, 



'd-i 



Ttl/k{xxu) = Ttl/k Y1 ^^^d-iC^'r . (2) 



,j=0 



Substituting the above values of hi into Equation (|2]) we get 



'd-l 



TrL/K{xXk) = Ttl/k Y.^l/d).{l/Td).C^T = Ttl/k 5^CV^' • 



, i=0 / \i=0 
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When A; = 0, we have {J2i=o C^ l^"^) — ^l^i ^'^d so Tlik{x,x) = 1 as required. When fc 7^ 0, 
we have (^jJo C^ 1^"^) — 0) ^^^ ^^ TL/K{x,g{x)) = 6i^g as required. 



Theorem 4.7 The element 

is a self-dual integral normal basis generator for A^/k- 

Proof. The extension L/K is tamely ramified, therefore gcd{d,p) = 1 and d is a unit in Ol- 
The polynomial X'^ — r is Eisenstein so t^^'^ is a uniformising parameter in L. Therefore 
(1 — r) and (1 — r^^'^) are both units, and so vl{x) = (1 — d)/2. 

Using the lower numberring of ramification groups, we have G = Gq and Gi = as L/K 
is totally tamely ramified. From Hilbert's formula for the valuation of the different (see [2T] 
IV §2 Prop. 4), we then know that vl{'^l/k) = d — 1 and vl{Al/k) = (1 — d)/2. Therefore 
X G Al/k- From Lemma 1^^ we know that TrL/K{x,g{x)) = 6i^g. Our result now follows 
from [T6| Lemma 8. 



Remark 4.8 We remark that the construction in this section is still valid when p = 2. 

4.2.2 Totally Wildly Ramified Extensions 

We now let L/K be a totally wildly weakly ramified abelian extension of odd degree with 
Galois group G. From |4j §4 Lemma 4.2 we know L must be contained in Kt^2 for some 
uniformising parameter vr and that [L : K] = p* for some integer i. This lemma also shows 
that, with the lower numbering of ramification groups, G = Gq = Gi and G2 = {1}. Our 
field L will then be contained in the unique field M C Kt^2 such that [M : K] = q. We let 
r = Gal{M/K). See Fig. H 

Proposition 4.9 Let L/K be an odd abelian p-extension with Galois group G which is at 
most weakly ramified. Let x & L be an integral normal basis generator for A^/k- Then 
Rl/k{x) is a square in Dk[G]^ and using Notation \2.6[ 

1 

O X 



^JRl/k{x) 
is a self-dual integral normal basis generator for Al/k- 
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Figure 2: Weakly ramified extensions of K 



Proof. We essentially follow the same method in the proof of Theorem 13.31 The group G is 
a p-group, therefore from Lemma [2. II we know that the following sequence is exact 



1^(1+Z)^{Dk[G]Y ^k'^ ^l. 



(3) 



where Z is the Jacobson radical of Da'[G'] and k is the residue field of K. The homomorphism 

e : {Ok[G])'^ ^ fcMs defined as 



g&G g&G 



ag) mod TT 



for J2qeG'^99 ^ i^K[G])^. We now observe that fc^ C (Di^[G])^ so there exists a natural 
embedding, j : k^ ^ {Ok[G])^ which has the property 6j = l^x. Therefore the short exact 
sequence, ([3]), is split and 

iDj4G]r=k'<x{l+Z). 

Let e : Dii-[G] — )■ Ok be the augmentation map on DA'iG]. A straightforward calculation, 
left as an exercise, shows that e{RL/K{x)) = TrdxY, and so 9{Rl/k{x)) = e{RL/K{x)) 
mod vr is a square in k^ . The group (1+5) is a pro-p group with {p, 2) = 1, so every element 
of (1 + 5) will be a square. Therefore, we can write Rl/k{x) = w^ for some w G {Dk[G])^ . 

From Theorem 12.51 we know that Rl/k{x) = uu for some u G {Dk[G])^. We then have 
w"^ = uu and w"^ = w"^ = uu = uu, therefore w"^ = w"^. Since w G {Dk[G])^ we can 
write w = {wi,W2) and w"^ = (tt;f,w|) with wi G k^ and W2 G (1 +■?). We then see that 
W = {wi,W2) and uJ^ = {wl,W2). The group (1 + Z) is a pro-p group with (p, 2) = 1 so 
?/'2 : a H-)- a^ is an automorphism of (1 +5). Therefore, if W2 = w\ then W2 = W2, and so 
w = W. 



If we let w = \JRl/k{.x) the result then follows from Theorem [2? 
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Theorem 4.10 Let f{X) = X'^ + ttX and a be a primitive root o/[7r^]j(X). Let x = a^ ^/p, 
using Notation \2.6\f we have that 



1- Ttm/l ,^ °x\ and 

\\/Rm/k[x) 

1 

oTrMiT.ix) 



^jRL/K{TrM/L{x)) 
are both self-dual integral normal basis generators for Al/k- 

Proof. 

In |25] Corollary 2.5, Vinatier proves that any x E M with vm{,x) = vm{Am/k) = 1 — g is 
a normal basis generator for Am/k and that TrM/L^x) is a normal basis generator for A^/k. 
Therefore, if Vm{x) = 1 — q, both parts follow from Proposition 14.91 and Lemma [4.31 

We now just need to show that v{a'^'~^/p) = 1 — q. We know a is a uniformising parameter 
for Ok^2 as [7r^](X)/[7r](X) is Eisenstein. The extension Kt^^2/M is totally ramified, so 
NK^^2/M{oi) will be a uniformising parameter for Om- With the above choice of f{X), we 
clearly have [C]/(X) = (X for C"^ = 1- We then see that the group {[(]/(«) : C^"^ = 1} 
is of order (g — 1) and each element is a distinct root of [7r^](X), and so these must be the 
Galois conjugates of a for i^^^/^- Therefore Nx^^^/Mict) = a'^^^- Our result then follows 
as vm{p) = q- 



Remark 4.11 1. When p = 2 there will not exist any abelian totally wildly weakly ram- 
ified extensions of K of odd degree. 

4.3 Unramified extensions 

In this section we assume that L/K is a finite abelian unramified extension of odd degree, 
d. Let k (resp. /) be the residue field of Ok (resp. Dl). Let \k\ = q, which implies that 
|/| = q'^. Let ( G /ig"-i be a primitive (g" — l)th root of unity in K. From |8] Theorem 25 we 
know that L = K{(), Dl = Ok[C] and that Gal(L/i^) = G is generated by the Frobenius 
element, (J)k : ( ^-^ C^- 

The group G = Gal{L/K) is a finite cyclic group, and so it can be written as a finite 
product 

i 

where C^^ is a cyclic group of order tij such that nj is a power of a unique prime for all i. 
We can then write L as a compositum of fields L = YliLi where Ga].{Li/K) = C„., Li/K 
is unramified and Li H Lj = K for all i ^ j. Using Lemma 14. 2[ we are now reduced to 
considering the case where L/K is cyclic and d is some prime power. 

Considering the extension of residue fields we will make crucial use of the basis generators 
constructed for extensions of finite fields. 
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4.3.1 Unramified p-extensions 

We first consider the case where i^ is a finite extension of Qp and rf is a power of p. 

Theorem 4.12 Let K he a finite extension ofQp withp ^ 2. Let L/K he a finite unramified 

ahelian extension with Galois group G and [L : K] a power of p. Let x G Ol such that x = tj 

mod *Pl where rj is the normal hasis generator for l/k constructed as in Section lSTll and with 

Notation \2.6\f then 

1 

O X 



is a self-dual integral normal hasis generator for Dl = Aljk- 

Proof. Let vr be a uniformising parameter of Or-, then the Jacobson radical of Ok is t^'^k- 
By assumption we have / = k[G].ri which imphes that Ol = OK[G].ri mod ttDl- Therefore, 
by Nakayama's lemma (see p], Ch.2 Prop. 2.6), we have x G Ol is an integral normal basis 
generator for Ol ii x = rj mod ttOl- Our result now follows from Proposition 14.91 ■ 

4.3.2 Unramified p'-extensions 

Theorem 4.13 For K a finite extension of Qp where p j^ 2 and for L/K a finite ahelian 

unramified extension of degree d = r^ where r is an odd prime different to p. Let x G Ol 

he such that x = i]' where v( is as in Theorem \3.^ and let ^/R^lJk{^ be as in Notation \2.6[ 

then 

1 

= O X 
y/RL/xix) 

is a self-dual integral normal hasis for Ol = ^l/k- 

Proof. Let tt be a uniformising parameter for Ok- We have x = rj' mod ttOl, which means 

TrG{x,g{x)) = TrG{r]',g{v')) mod vrD^- 
= 6i^g mod tiOk- 

Therefore, we have Rl/k{x) = J2geG(^^9(-^))9 ^ 1 + '^^k[G]. This means that Rl/k{x) G 
I -\- Z where Z is the Jacobson radical of Dii-[G']. We know that 1 + -J is a pro-p group, with 
(p, 2) = 1, therefore every element is a square. We then have Rl/k{x) = \/Rl/k (x) ^/Rl/k (x) 

and ^JRl/k{x) = ^JRl/k{x). The result now follows from the arguments in Theorem 12.51 



Remark 4.14 i. An observation of Vinatier is that it is seems very attractive to use the 
square-root of the inverse of an element to construct hasis generators for the square-root 
of the inverse different. 

2. The theory presented here is complete for finite fields and local fields L/K/Qp, with 
p 7^ 2. When p = 2 the only case needed to complete the theory is L/K unramified and 
[L : K] = r* for some odd prime r and i eN. 
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